1 . In a distributed computing system comprising a client coupled to a plurality of 
resources on a network, a system to control client access to such resources 
comprising: 

a database to store one or more policy criteria associated with a user; 
a license manager to generate one or more tokens according to allocated 
access session based on said policy criteria associated with the user; and 

a token monitor to initiate resource access according to said generated 

token. 

2. The system of claim 1, wherein the allocated access session is based on said 
policy criteria associated with said resource. 

3. The system of claim 1, wherein the policy criteria is a combination of different 
policy criterion. 

4. The system of claim 1, wherein one or more allocated access session is associated 
with the user. 

5 . The system of claim 1 ? wherein the token monitor further comprises a criteria 
evaluator that notifies token monitor if said criteria is triggered. 
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6. The system of claim 5, wherein the criteria evaluator is a calendar and said 
criterion triggered is a specific period including a certain day of the week, a 
certain day of the month, a certain month, a certain week, or a certain number of 
days. 

5 

7. The system of claim 5, wherein the criteria evaluator is a counter and said 
criterion triggered is a number including number of user access, number of files 
produced, number of files opened, number of files saved, or number of pages 
printed. 

10 

8. The system of claim 5, wherein the criteria evaluator is a timer and said criterion 
triggered is a time including a time of day, a time interval in a day, or specific 
time on a specific day. 

15 9. The system of claim 1, further comprises a secondary access database that 

provides for token creation when initial allocated access session(s) are depleted. 

10. The system of claim 1, further comprises a notification component to alert user 
when initial allocated access session(s) reach a pre-selected level. 

20 

11. In a distributed computing system, a method for managing user access to 
resources on a network comprising the steps of: 
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creating one or more resource access session(s) by a system administrator, 
wherein said resource access session(s) are assigned to a specific user and stored 
on a database; 

verifying a user resource request against its associated resource access 
session(s) by a license manager; and 

generating a token corresponding to said resource access session(s) for the 
user by said license manager, wherein the token enables user to access said 
resource. 

12. The method of claim 11, wherein the creation of resource access session(s) is 
based on user licensing criteria. 

13. The method of claim 1 1, wherein the creation of resource access session(s) is 
based on application licensing criteria. 

14. The method of claim 11, further comprising the step of creating secondary 
resource access session(s) for token generation when initial resource access 
session(s) are depleted. 

15. The method of claim 11, wherein the token generated enables resource access for 
a segment of the whole resource access session. 



-15- 



MOON-P008 



16. The method of claim 15, further comprising generating a new token when said 
segment access is depleted and additional access remains in the whole resource 
access session. 

17. The method of claim 1 1, further comprising the steps of: 

notifying the user when initial resource access session(s) reaches a pre- 
selected level; and 

renewing by the user said initial resource access session(s). 

18. The method of claim 17, wherein the user utilizes a secondary access session(s). 

19. The method of claim 11, further comprising the steps of: 

monitoring a license criterion of said token; and 

terminating user access when said license criterion is triggered. 
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